The OKI C5510MFP printer offers a web interface for the configuration. Certain pages require higher privileges for making changes. However, the password required for accessing these pages is sent to the client in clear text by the printer. Furthermore, the password can be set without prior authentication. Consequently, the whole configuration can be changed without knowing the password.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/62753/okiprinter-reveal.txt
Source: https://packetstormsecurity.com/files/62753/okiprinter-reveal.txt.html